SYSTEMS AND METHODS FOR PREVENTING UNAUTHORIZED USE OF 
ROAMING NUMBERS IN A WIRELESS TELECOMMUNICATIONS SYSTEM 



Inventors: 



Janette Lin 



18422 Bay Pines 
Dallas, Texas 75287 

Victor Corby 

4404 Knollview Drive 

Piano, Texas 75024 



Prepared by: Roger S. Burleigh 

Registration No. 40,542 



CERTIFICATE OF MAILING BY EXPRESS MAIL 

"EXPRESS MAIL" Mailing Label No. ET462470209US 
Date of Deposit December 13. 2001 

I hereby certify that this paper or fee is being deposited with the U.S. Postal 
Service "Express Mail Post Office to Addressee" service under 37 CFR 1 .10 on 
the date indicated above and is addressed to the Assistant Commissioner for 
Patents, Box Patent Application, 2900 Crystal Drive 
Arlington, VA 22202. 



Assignee: 



Telefonaktiebolaget L.M. Ericsson (publ) 




Signature 



SYSTEMS AND METHODS FOR PREVENTING UNAUTHORIZED USE OF 
ROAMING NUMBERS IN A WIRELESS TELECOMMUNICATIONS SYSTEM 



TECHNICAL FIELD OF THE INVENTION 

[0001] The present invention is directed, in general, to communications 
systems and, more specifically, to apparatus, systems and methods to prevent 
unauthorized use of roaming numbers in a wireless telecommunications system. 

BACKGROUND OF THE INVENTION 

[0002] The world is currently experiencing revolutionary changes in 
communications systems, brought about, in part, by the general availability and 
evolution of wireless telephony systems. Immediately after the first mobile user 
headed off into the sunset with a cellular telephone, or Mobile Station (MS), 
however, someone else wondered where they went. Unlike conventional wireline 
telephones, wireless callers are not usually associated with a fixed location, which 
provides many benefits such as freedom of use over large geographical areas. 
Because the location of a MS is usually not fixed, it is necessary for the wireless 
telephony system to be able to determine where the MS is located so that calls can 
be properly routed to it. 

[0003] In order to route a call to a MS that is outside of the home area of the 
subscriber's service provider, a roaming number must be used. When a call is made 



PATENT APPLICATION PAGE 2 

EUS/J/l/01-1055 

Attorney Docket No. P14738-PUCN 




to a MS, a Gateway Mobile Switching Center (GMSC) sends a query to a Home 
Location Register (HLR) to determine how to route a call to the MS. The HLR keeps 
track of the approximate location of the MS within the wireless telephony network. 
The HLR requests a roaming number from the Mobile Switching Center serving the 
geographical area in which the MS is currently located. The HLR forwards the 
roaming number to the GMSC, which then uses the number to setup the call toward 

O the serving MSC. 

O 

N [0004] Roaming numbers are a MSC switch property; they belong to the 

fjj MSC. Roaming numbers are public network numbers and are associated with a 

- specific MSC; i.e., a call to a roaming number will always be routed to a specific 

p i MSC. Network operators assign a particular set of roaming numbers to each MSC 

X switch so that terminating calls to a MS served by the MSC can be completed using 

6 

M one of the MSC's associated roaming numbers. The public network, e.g., the Public 

Switched Telephone Network (PSTN) or the Public Land Mobile Network (PLMN), 
uses a routing mechanism that routes calls to a particular MSC when a roaming 
number associated with that MSC is allocated to a call request to a MS within the 
service area of the MSC. A call setup request to a roaming number associated with 
a MSC is performed in the same manner as any ordinary call. 
[0005] Because a call setup request to a roaming number is performed in the 
same manner as any ordinary call, it is possible for any person who discovers the 
roaming numbers associated with a MSC to place malicious calls to one or more of 
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the roaming numbers associated with each MSC within a wireless network. A 
conventional MSC does not have any mechanisms to ensure that an incoming call 
request is, in fact, associated with a call request to a MS within the service area of 
the MSC. Accordingly, there is a need in the art for systems and methods to prevent 
unauthorized use of roaming numbers in a wireless telecommunications system. 
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# 



SUMMARY OF THE INVENTION 

[0006] To address the above-discussed deficiencies of the prior art, the 
present invention provides systems and methods related to preventing unauthorized 
use of roaming numbers in a wireless telecommunications system. 
[0007] Upon receipt of a call request for a mobile terminal at a Gateway 
Mobile Switching Center (GMSC), the GMSC queries a Home Location Register 

N< 

O (HLR). The HLR requests a roaming number for the mobile terminal from a Mobile 

D 

M Switching Center (MSC). The MSC allocates a roaming number for the mobile 

m 

Kj terminal, assigns an authentication code, and sends to the HLR. The HLR receives 

w the roaming number and authentication code and relays to the GMSC. The GMSC 

pj sends a call setup request to the MSC; the call setup request includes the roaming 

M' 

$ number and the authentication code. The MSC confirms the authentication code 

O 

3M and, if the authentication code for the roaming number is confirmed, completes the 

call request to the mobile terminal. The use of an authentication code can prevent 
attacks on MSC resources by the unauthorized use of roaming numbers. 
[0008] The authentication code assigned to a roaming number for a particular 
call can be dynamically selected. Various methods known in the art for creating 
random codes can be used. In some embodiments, the authentication code can be 
a function of the roaming number, the time at which the roaming number is 
requested, and/or, the date on which the roaming number is requested. The 
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principles of the invention are not limited to any particular method for selecting or 
calculating an authentication code. 

[0009] The methods disclosed herein for preventing unauthorized use of 
roaming numbers in a wireless telecommunications system depend on the 
adaptation of particular nodes within a wireless telecommunications system. These 
nodes include a Gateway Mobile Switching Center (GMSC), a Home Location 
Register (HLR), and a Mobile Switching Center (MSC). 

[0010] An MSC, adapted to prevent unauthorized use of roaming numbers 
in accordance with the principles disclosed herein, is operative to: receive a request 
for a roaming number from a Home Location Register (HLR) associated with a 
mobile terminal located within the geographical service area of the MSC; allocate 
a roaming number for the mobile terminal; assign an authentication code to the 
roaming number; send a response to the request for roaming number to the HLR, 
wherein the response includes the roaming number and the authentication code, 
and the HLR relays the roaming number and the authentication code to the GMSC 
that has received a call request for the mobile terminal; receive a call setup request 
from the GMSC, wherein the call setup request includes the roaming number and 
the authentication code; confirm the authentication code in the call setup request; 
and, if the authentication code for the roaming number is confirmed, complete the 
call request to the mobile terminal. 
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U: 



[001 1] A GMSC, adapted to prevent unauthorized use of roaming numbers 
in accordance with the principles disclosed herein, is operative to: receive a call 
request for a mobile; send a request for routing information to HLR associated with 
the mobile terminal, wherein the request for routing information causes the HLR to 
send a request for a roaming number to the MSC associated with the roaming area 
in which the mobile terminal is geographically located, and wherein the request for 

a roaming number causes the MSC to allocate a roaming number for the mobile 

0 

p : terminal, assign an authentication code to the roaming number, and send a 

m 

0C! response to the request for roaming number to the HLR, the response including the 

in 

W roaming number and the authentication code; receive the roaming number and the 

B 

if! authentication code from the HLR; send a call setup request to the MSC, wherein 

fli 

J the call setup request includes the roaming number and the authentication code, 

6 

1* and wherein the MSC completes the call request only upon confirming the 

authentication code for the roaming number. 

[001 2] An HLR, adapted to prevent unauthorized use of roaming numbers in 
accordance with the principles disclosed herein, is operative to: receive a request 
for routing information from a GMSC, the request for routing information identifying 
a mobile terminal associated with the HLR for which the GMSC has received a call 
request; send a request for a roaming number to MSC associated with the roaming 
area in which the mobile terminal is geographically located, wherein the request for 
a roaming number causes the MSC to allocate a roaming number for the mobile 
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terminal, assign an authentication code to the roaming number, and send a 
response to the request for roaming number to the HLR, the response including the 
roaming number and the authentication code; receive the roaming number and the 
authentication code from the MSC; send the roaming number and the authentication 
code to the GMSC, whereupon the GMSC can send a call setup to the MSC, the 
call setup request including the roaming number and the authentication code, 

y wherein the MSC completes the call request only upon confirming the authentication 

p code for the roaming number. 

|| [0013] The foregoing has outlined, rather broadly, the principles of the 

y present invention so that those skilled in the art may better understand the detailed 

s 

M- description of the exemplary embodiments that follow. Those skilled in the art 

H; should appreciate that they can readily use the disclosed conception and exemplary 

embodiments as a basis for designing or modifying other structures and methods 
for carrying out the same purposes of the present invention. Those skilled in the art 
should also realize that such equivalent constructions do not depart from the spirit 
and scope of the invention in its broadest form. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[0014] For a more complete understanding of the present invention, 
reference is now made to the following detailed description taken in conjunction with 
the accompanying drawings, in which: 

[0015] FIGURE 1 illustrates a signaling diagram of a prior art system for 
providing a roaming number for a mobile terminal in a wireless telecommunications 
jr network; 

j~| [001 6] FIGURE 2 illustrates a signaling diagram for an exemplary system to 

0"! 

CD prevent unauthorized use of roaming numbers in a wireless telecommunications 

I Fi 

w system in accordance with the principles of the present invention; and 

a 

^; [001 7] FIGURE 3 illustrates an exemplary flowchart of a method to prevent 

t. unauthorized use of roaming numbers in a wireless telecommunications system in 

^ accordance with the principles of the present invention. 
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DETAILED DESCRIPTION 

[001 8] Referring to FIGURE 1 , illustrated is a simplified signaling diagram of 
a prior art system 100 for providing a roaming number for a mobile terminal 120 
subscribed to a wireless telecommunications network 130. The wireless 
telecommunications network 130, or Public Land Mobile Network (PLMN), 
conventionally includes a Gateway Mobile Switching Center (GMSC) 131 , at least 
one Mobile Switching Center (MSC) 132 coupled to the GMSC through the Public 
Switched Telephone Network 140, at least one Base Station Subsystem (BSS) 133 
coupled to each MSC 132, and a Home Location Register (HLR) 134. 
[0019] Using a telephony device 111, such as a conventional telephone or 
a wireless terminal, a call request directed to a mobile device 120 is routed to the 
GMSC 131; the call request includes a unique identifier of the mobile device 120, 
such as a Mobile Station Integrated Service Digital Network (MSISDN) number. The 
GMSC 131 then sends an inquiry, e.g., Send_Routing_ln formation, to a location 
resource, e.g., HLR 134, to determine the location of the mobile device 120 having 
the unique identifier. The HLR 134 queries a database using the unique identifier, 
wherein the database includes an association between the unique identifier and the 
serving node, e.g., MSC 132, of the wireless telecommunications network 130 in 
communication with the mobile device 120. The HLR 134 then sends a request, 
e.g., Provide_Roaming_Number, to the MSC 132 to obtain a roaming number, e.g., 
a Mobile Subscriber Routing Number (MSRN), for the mobile device 120. The MSC 
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132 responds to the Provide_Roaming_Number request by allocating a roaming 
number for the mobile terminal 120 for the particular call request and sending the 
roaming number to the HLR 134. The HLR 134 sends the MSRN to the GMSC 131 , 
which uses the MSRN to route the call request to the MSC 132 through the PSTN 
140. The MSC 132 completes the call to the mobile device 120 through the proper 
BSS 133 in communication with the mobile device 120. 

[0020] As noted previously, however, a problem with roaming numbers 
associated with a MSC is that such numbers may become known to persons that 
may seek to interfere with the operation of the wireless network. For example, 
telephony device 1 1 1 could be a computer having a modem. A malicious user could 
program the computer to continuously dial one or more roaming numbers 
associated with MSC 132, thus interfering with the allocation of roaming numbers 
by MSC 132 to valid calls directed to mobile terminals, such as mobile terminal 120. 
The invention disclosed herein overcomes this problem. 

[0021] Turning now to Figure 2, illustrated is a signaling diagram for an 
exemplary system 200 to prevent unauthorized use of roaming numbers in a 
wireless telecommunications system in accordance with the principles of the 
present invention. As in Figure 1, the wireless telecommunications network 230 
includes a Gateway Mobile Switching Center (GMSC) 231, at least one Mobile 
Switching Center (MSC) 232 coupled to the GMSC through the Public Switched 
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Telephone Network 140, at least one Base Station Subsystem (BSS) 133 coupled 
to each MSC 232, and a Home Location Register (HLR) 234. 
[0022] Using telephony device 111, such as a conventional telephone or a 
wireless terminal, a call request directed to a mobile device 120 is routed to the 
GMSC 231 ; the call request includes a unique identifier of the mobile device 120, 
such as a Mobile Station Integrated Service Digital Network (MSISDN) number. The 
GMSC 231 then sends an inquiry, e.g., Send_Routing_lnformation, to a location 
resource, e.g., HLR 234, to determine the location of the mobile device 120 having 
the unique identifier. The HLR 234 queries a database using the unique identifier, 
wherein the database includes an association between the unique identifier and the 
serving node, e.g., MSC 232, of the wireless telecommunications network 230 in 
communication with the mobile device 120. The HLR 234 then sends a request, 
e.g., Provide_Roaming_Number, to the MSC 232 to obtain a roaming number, e.g., 
a Mobile Subscriber Routing Number (MSRN), for the mobile device 120. 
[0023] The MSC 232 includes functionality to provide assignment and 
confirmation of a roaming number authentication code. The authentication code 
assigned to a roaming number for a particular call can be dynamically selected. 
Various methods known in the art for creating random codes can be used. In some 
embodiments, the authentication code can be a function of the roaming number, the 
time at which the roaming number is requested, and/or, the date on which the 
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roaming number is requested. The principles of the invention are not limited to any 
particular method for selecting or calculating an authentication code. 
[0024] Once the MSC 232 has allocated a roaming number and assigned it 
an authentication code, the roaming number and authentication code are sent to the 
HLR 1234. The HLR 234 relays the roaming number and authentication code to the 
GMSC 231. The GMSC 231 then sends a call setup request to the MSC 232, 

jjj including the roaming number and the authentication code; the call setup request 

pi 

P can be sent, for example, using a Signaling System 7 (SS7) network associated with 

fin 

DO the PSTN 140. When the MSC 232 receives the call setup request, it confirms that 

S 

Ul the received authentication code is the proper code for the received roaming 

a 

M : number. If the authentication code is correct, the MSC 232 completes the call setup 

W 

t request, and communication is established between the telephony device 1 1 1 and 

4" 

u, mobile terminal 120. 

[0025] Turning now to Figure 3, illustrated is an exemplary flowchart 300 of 
a method to prevent unauthorized use of roaming numbers in a wireless 
telecommunications system in accordance with the principles of the present 
invention. The method 300 can be embodied in software, hardware, or a 
combination thereof, within the computer processing systems associated with 
GMSC 231 , HLR 234 and MSC 232. 

[0026] In a step 310, a call request for a mobile terminal is received at 
GMSC. In a step 320, the GMSC queries a Home Location Register HLR for routing 
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information for the mobile terminal. In a step 330, the HLR requests a roaming 
number for the mobile terminal from the MSC within the geographical area in which 
the mobile terminal is currently located. In a step 340, the MSC allocates a roaming 
number for the mobile terminal, assigns an authentication code, and sends to the 
HLR. In a step 350, the HLR receives the roaming number and authentication code 
and relays to the GMSC. In a step 360, the GMSC sends a call setup request to the 
MSC; the call setup request includes the roaming number and the authentication 
code. In a step 370, the MSC confirms the authentication code and, if the 
authentication code for the roaming number is confirmed, completes the call request 
to the mobile terminal (Step 380); otherwise, the MSC rejects the call setup request 
(Step 390). 

[0027] From the foregoing, those skilled in the art will recognize that the 
present invention advances the state of the art of communications systems, 
providing systems and methods related to preventing unauthorized use of roaming 
numbers in a wireless telecommunications system. Although the present invention 
has been described in detail, those skilled in the art will conceive of various 
changes, substitutions and alterations to the exemplary embodiments described 
herein without departing from the spirit and scope of the invention in its broadest 
form. The exemplary embodiments presented herein illustrate the principles of the 
invention and are not intended to be exhaustive or to limit the invention to the form 
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disclosed; it is intended that the scope of the invention only be limited by the claims 
appended hereto, and their equivalents. 
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